NIST password guidlines

NIST Special Publication 800-63B by NIST (nvlpubs.nist.gov)

Users should be encouraged to make their passwords as lengthy as they want, within reason. Since the size of a hashed password is independent of its length, there is no reason not to permit the use of lengthy passwords (or pass phrases) if the user wishes. Extremely long passwords (perhaps megabytes in length) could conceivably require excessive processing time to hash, so it is reasonable to have some limit.

The new NIST guidance on passwords recommend that:

  • passwords never expire
  • no required character complexity or variety rules be implemented
  • the maximum length for passwords be set to 64 characters
  • the minimum length for passwords be set to 8 characters
  • passwords are checked against known bad passwords, banned lists, etc.
  • no hints or knowledge-based questions be provided to someone trying to log in (like “Who was your best friend in high school?”)
  • passwords only are changed when forgotten

I would add two-factor authentication to that. Where possible, my online account passwords are sixteen characters or longer. I change them after notification of a data breach or in some cases, once a year. Where feasible, I have enabled two-factor or two-step authentication for my accounts. Even on my iMac at home, I have a 24 character password. I use a different password for each online account. I use a password vault application such as 1Password or LastPass to track my passwords. I protect the password vault with a sixteen character password that I don't use anywhere else.

What is a Juicy or Hazy India Pale Ale?

Brewers Association Beer Style Guidelines by Brewers Association

Since 1979 the BA has provided beer style descriptions as a reference for brewers and beer competition organizers.

The New England India Pale Ale/Double India Pale Ale is now called the Juicy or Hazy India Pale Ale/Double India Pale Ale and The Brewers Association has finally set guidelines for what makes up my favourite American craft ale style.

Brewers Association Beer Style Guidelines by Brewers Association

Since 1979 the BA has provided beer style descriptions as a reference for brewers and beer competition organizers.

The New England IPA is dead. Long live the Juicy or Hazy India Pale Ale (IPA).

  • Color: Straw to deep gold
  • Clarity: Low to very high degree of cloudiness is typical of these beers. Starch, yeast, hop, protein and/or other compounds contribute to a wide range of hazy appearance within this category.
  • Perceived Malt Aroma & Flavor: Low to low-medium malt aroma and flavor may be present
  • Perceived Hop Aroma & Flavor: Medium-high to very high hop aroma and flavor are present, with attributes typical of hops from any origin
  • Perceived Bitterness: Medium-low to medium
  • Fermentation Characteristics: Low to medium fruity-esters aroma and flavour may be present, but are usually overwhelmed by hop fruitiness. Diacetyl should not be perceived.
  • Body: Medium-low to medium-high. Perceived silky or full mouthfeel may contribute to overall flavor profile.
  • Additional notes: Grist may include a small amount of oat, wheat or other adjuncts to promote haziness. Descriptors such as “juicy” are often used to describe the taste and aroma hop-derived attributes present in these beers.
  • India Pale Ale has an Alcohol by Weight (Volume) of 5.0%-6.0%(6.3%-7.5%) • Bitterness (IBU) 50-70
  • Imperial/Double India Pale Ale has an Alcohol by Weight (Volume) of 6.0%-8.4%(7.6%-10.6%) • Bitterness (IBU) 65-100

For those who have never tried or heard of it, a Juicy IPA is an aggressively hopped unfiltered IPA or Double IPA. The appearance ranges from slightly hazy or cloudy to opaque or muddy but NOT chalky. Dry-hopping, the use of high-protein grains (flours, flaked oats, wheat), certain yeast strains, water chemistry, CO2 levels, and other techniques may also contribute to the beer’s haze and mouthfeel. But the overall goal is typically a hazy, juicy IPA packed with fruity and floral flavours and aroma.

The style got its start in Vermont and Massachusetts but has spread throughout the Midatlantic area. New Jersey has a few micro-brewers who make top-notch examples of this style and three of them are close to home. My number one favourite brewery is Troon Brewing in Hopewell, New Jersey but I also love ales from Flounder Brewing in Hillsborough and Conclave Brewing in Raritan/Flemington, New Jersey.

I am blessed with the good fortune of living within 15 minutes, 20 minutes, and 40 minutes of these three breweries.

Untappd (in-order of proximity to my home).